Xiongmai

Products

ProductCVEsExploitedLatest
AHB7004T-GS-V31–Apr 14, 2024
AHB7004T-MHV21–Apr 14, 2024
AHB7804R-MH-V21–Apr 14, 2024
AHB8004T-GL1–Apr 14, 2024
AHB8008T-GL1–Apr 14, 2024
AHB8032F-LME1–Apr 14, 2024
DVR/NVR devices1–Mar 29, 2026
XM530_R80X30-PQ_8M1–Apr 14, 2024

Exploited and recent CVEs

  • CVE-2026-34005 High 8.8 In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol (T 1.6%
  • CVE-2024-3765 Critical 9.8 Xiongmai AHB7804R-MH-V2 Sofia Service access control 1.3%
  • CVE-2024-3765 Critical 9.8 Xiongmai AHB7804R-MH-V2 Sofia Service access control 1.3%
  • CVE-2024-3765 Critical 9.8 Xiongmai AHB7804R-MH-V2 Sofia Service access control 1.3%
  • CVE-2024-3765 Critical 9.8 Xiongmai AHB7804R-MH-V2 Sofia Service access control 1.3%
  • CVE-2024-3765 Critical 9.8 Xiongmai AHB7804R-MH-V2 Sofia Service access control 1.3%
  • CVE-2024-3765 Critical 9.8 Xiongmai AHB7804R-MH-V2 Sofia Service access control 1.3%
  • CVE-2024-3765 Critical 9.8 Xiongmai AHB7804R-MH-V2 Sofia Service access control 1.3%